ISO/TS 22317:2015
Societal security — Business continuity management systems — Guidelines for business impact analysis (BIA)
ISO/TS 22317:2015 provides guidance for an organization to establish, implement, and maintain a formal and documented business impact analysis (BIA) process. This Technical Specification does not prescribe a uniform process for performing a BIA, but will assist an organization to design a BIA process that is appropriate to its needs.
ISO/TS 22317:2015 is applicable to all organizations regardless of type, size, and nature, whether in the private, public, or not-for-profit sectors. The guidance can be adapted to the needs, objectives, resources, and constraints of the organization.
It is intended for use by those responsible for the BIA process.
| Get this standard | Prices exclude GST | |
|---|---|---|
| PDF ( Single user document) |
$126.00 NZD
|
|
| HardCopy |
$173.00 NZD
|
|
| Networkable PDF |
Price varies
|
Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Prerequisites
4.1 General
4.2 BC programme context and scope
4.2.1 BC programme context
4.2.2 Scope of the BC programme
4.3 BC programme roles
4.3.1 BC programme roles and responsibilities
4.3.2 BIA process-specific roles and competencies
4.4 BC programme commitment
4.5 BC programme resources
5 Performing the business impact analysis
5.1 General
5.2 Project planning and management
5.2.1 General
5.2.2 Initial BIA considerations
5.3 Product and service prioritization
5.3.1 Overview
5.3.2 Inputs
5.3.3 Outcomes
5.4 Process prioritization
5.4.1 General
5.4.2 Inputs
5.4.3 Outcomes
5.5 Activity prioritization
5.5.1 Overview
5.5.2 Inputs
5.5.3 Information collection
5.5.4 Outcomes
5.6 Analysis and consolidation
5.6.1 Overview
5.6.2 Inputs
5.6.3 Methods
5.6.4 Outcomes
5.7 Obtain top management endorsement of BIA results
5.7.1 General
5.7.2 Inputs
5.7.3 Methods
5.7.4 Outcomes
5.8 After the BIA — Business continuity strategy selection
6 BIA process monitoring and review
Annex A (informative) Business impact analysis within an ISO 22301 business continuity management system
Annex B (informative) Business impact analysis terminology mapping
Annex C (informative) Business impact analysis information collecting methods
Annex D (informative) Other uses for the business impact analysis process
Bibliography
Keep me up-to-date
Sign up to receive updates when there are changes to this standard
Related Information
Similar Standards
-
AS/NZS 5050(Int):2020
Managing disruption-related risk -
AS/NZS IEC 31010:2020
Risk management - Risk assessment techniques -
AS/NZS IEC 31010:2020 A1
Risk management - Risk assessment techniques
-
AS/NZS IEC 62198:2015
Managing risk in projects - Application guidelines
Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Prerequisites
4.1 General
4.2 BC programme context and scope
4.2.1 BC programme context
4.2.2 Scope of the BC programme
4.3 BC programme roles
4.3.1 BC programme roles and responsibilities
4.3.2 BIA process-specific roles and competencies
4.4 BC programme commitment
4.5 BC programme resources
5 Performing the business impact analysis
5.1 General
5.2 Project planning and management
5.2.1 General
5.2.2 Initial BIA considerations
5.3 Product and service prioritization
5.3.1 Overview
5.3.2 Inputs
5.3.3 Outcomes
5.4 Process prioritization
5.4.1 General
5.4.2 Inputs
5.4.3 Outcomes
5.5 Activity prioritization
5.5.1 Overview
5.5.2 Inputs
5.5.3 Information collection
5.5.4 Outcomes
5.6 Analysis and consolidation
5.6.1 Overview
5.6.2 Inputs
5.6.3 Methods
5.6.4 Outcomes
5.7 Obtain top management endorsement of BIA results
5.7.1 General
5.7.2 Inputs
5.7.3 Methods
5.7.4 Outcomes
5.8 After the BIA — Business continuity strategy selection
6 BIA process monitoring and review
Annex A (informative) Business impact analysis within an ISO 22301 business continuity management system
Annex B (informative) Business impact analysis terminology mapping
Annex C (informative) Business impact analysis information collecting methods
Annex D (informative) Other uses for the business impact analysis process
Bibliography